Data Processing Agreement

You, the workspace owner, are the data controller for your applications and their user data. JWS acts as a data processor, processing data only to provide the deployment, monitoring and support services described in the Terms of Service.

Processing covers account data (name, email), workspace configuration, project source code during import and analysis, deployment credentials (encrypted), application logs for the AI Log Explainer, and billing records in €.

JWS does not sell or mine your data, and does not access your production databases except during a support action you request.

Processing is protected by the measures described on the security page: row-level tenant isolation, TLS in transit, AES-256-GCM encryption for secrets at rest, two-factor authentication, session revocation and audit logging.

The third parties that process data on our behalf are listed on the sub-processors page. We notify workspace owners before adding a new sub-processor that handles customer data.

Deleting a project removes its deployments, findings and stored credentials. Deleting a workspace erases all member and project data after a 14-day recovery window.

The Deployment Passport (jws.yaml) keeps your configuration portable at all times.

Data-protection questions go through the contact page with the subject "Data protection", or email support@jws.jirify.net.